build(deps): Bump sha2 from 0.10.9 to 0.11.0 - #10
Conversation
dependabot
Bot
added
dependencies
praxis-bot
left a comment
praxis-bot
left a comment
There was a problem hiding this comment.
Dependabot Review
CI is failing. The sha2 0.10 to 0.11 bump is a breaking change from the RustCrypto ecosystem's migration from generic-array to hybrid-array. The digest output type changed from GenericArray<u8, ...> to hybrid_array::Array<u8, ...>, which does not implement LowerHex. All uses of format!("{:x}", hash) or similar hex formatting on digest outputs will fail to compile.
This needs code changes to adapt to the new API. Typical fix: call .as_slice() on the digest output and use a hex-encoding helper, or enable the oid feature and use the new API surface.
Four CI jobs are failing: MSRV, Clippy, Test, and Documentation.
| serde = { version = "1.0.229", features = ["derive"] } | ||
| serde_json = "1.0.151" | ||
| serde_yaml = "0.9" | ||
| sha2 = "0.10" |
There was a problem hiding this comment.
This is a breaking upgrade. The sha2 0.11 crate is part of the RustCrypto digest 0.11 ecosystem which replaced generic-array with hybrid-array. The new Array<u8, ...> output type does not implement LowerHex, so all hex-formatting of digest results (format!("{:x}", ...)) fails to compile. Code changes are needed to adapt to the new API.
Bumps [sha2](https://github.com/RustCrypto/hashes) from 0.10.9 to 0.11.0. - [Commits](RustCrypto/hashes@sha2-v0.10.9...sha2-v0.11.0) --- updated-dependencies: - dependency-name: sha2 dependency-version: 0.11.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
cbf6e75 to
c18ec23
Compare
1 participant
Bumps sha2 from 0.10.9 to 0.11.0.
Commits
ffe0939Release sha2 0.11.0 (#806)8991b65Use the standard order of the[package]section fields (#807)3d2bc57sha2: refactor backends (#802)faa55fbsha3: bumpkeccakto v0.2 (#803)d3e6489sha3 v0.11.0-rc.9 (#801)bbf6f51sha2: tweak backend docs (#800)155dbbfsha3: add default value for theDSgeneric parameter onTurboShake128/256...ed514f2Use published version ofkeccakv0.2 (#799)702bcd8Migrate to closure-basedkeccak(#796)827c043sha3 v0.11.0-rc.8 (#794)